Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa
File: 294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa (raw, json)
Hash identifier: l0BD5Ra81IGvzmGx9aC9fNd40fG9UT4CeRQRqFw/lHU=
Subject key identifier: 12:78:71:07:F4:02:61:C4:A1:CD:E2:91:13:27:14:89:66:91:37:E4
Certificate issuer: /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Certificate serial: 242FFA
Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa
Signing time: Sun 29 Oct 2023 07:30:00 +0000
ROA not before: Sun 29 Oct 2023 07:30:00 +0000
ROA not after: Tue 28 Oct 2025 07:30:00 +0000
asID: 263817
IP address blocks: 138.185.28.0/24 maxlen: 24
138.185.30.0/24 maxlen: 24
138.185.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371578 (0x242ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Validity
Not Before: Oct 29 07:30:00 2023 GMT
Not After : Oct 28 07:30:00 2025 GMT
Subject: CN=294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:18:fe:41:77:85:47:a0:f8:8a:4d:de:b5:
ab:d7:f6:b6:0a:3a:94:58:84:d7:3b:a8:c7:11:56:
36:df:6b:e9:10:54:39:e2:c9:52:ed:6d:7a:59:0a:
67:66:23:ae:19:86:c9:44:0e:0e:7a:db:d7:96:f4:
7b:b8:63:d4:e0:32:ba:79:57:4c:e5:7b:2b:66:a3:
d6:17:94:d8:c0:cc:60:f3:99:e5:4a:e1:d1:3d:b6:
e5:c7:9d:ed:ce:21:77:1e:75:91:48:f2:18:9b:91:
c6:1e:6c:52:e9:da:81:c8:45:76:8e:69:bb:a2:9c:
c0:f9:d5:c1:6f:81:19:6b:1e:68:69:9d:58:a2:9d:
42:40:6a:5b:ba:02:bb:eb:7b:0a:ef:98:05:d4:ac:
d9:73:e3:69:b9:c8:f4:84:9e:58:3b:01:7f:af:fe:
9a:94:cc:ad:9d:51:09:e3:ad:c4:e7:ea:ea:81:63:
b7:bc:72:ed:f9:99:ee:50:db:0c:da:08:eb:00:48:
66:d8:69:69:21:f6:05:fa:bd:14:39:c6:85:1e:6a:
88:bd:db:73:ee:78:86:55:c7:33:8c:c1:37:f4:13:
ac:69:8e:6b:b9:60:25:46:d9:1a:3b:64:cb:3d:90:
75:3d:63:ed:fb:d6:87:bf:02:7a:e6:58:21:25:df:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:71:07:F4:02:61:C4:A1:CD:E2:91:13:27:14:89:66:91:37:E4
X509v3 Authority Key Identifier:
keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.28.0/24
138.185.30.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:24:5e:b0:cf:8c:54:6d:65:cc:a1:6d:29:13:78:03:55:f5:
48:5f:2d:f1:e1:26:c3:41:3d:aa:10:d1:72:51:25:2d:50:ce:
20:f6:d9:95:f0:d9:03:4d:a7:d4:5d:fa:04:d4:95:00:98:a2:
70:be:e3:b8:99:fa:63:67:db:fa:c6:fe:8a:9b:83:50:d2:c6:
14:6b:5b:c6:82:6a:b1:72:bc:d2:a3:fe:51:98:d4:7d:8f:83:
00:06:1b:a2:5f:cf:15:bf:18:d2:03:4f:26:6e:cf:60:fc:66:
62:15:98:8c:38:dc:b6:d1:b5:b4:d8:6a:48:26:7b:fb:27:1d:
b1:97:f1:02:24:10:79:26:3e:38:a4:f3:39:28:ef:e8:04:62:
82:d8:0a:4d:3d:99:9f:00:2a:db:6d:7c:44:5f:c9:f3:f1:9d:
19:18:27:c7:74:4c:32:76:2a:a5:7d:52:f4:40:36:5f:f5:e3:
48:bd:3d:78:2a:28:13:9a:b3:27:35:94:f1:2b:b0:69:23:53:
53:c0:4a:c0:25:b5:86:95:26:30:77:5b:83:91:8b:17:66:8f:
ae:bf:54:21:98:3b:1c:16:7a:31:de:c3:f5:25:99:3b:fd:29:
23:7e:9c:b5:ea:6a:1f:fb:f9:38:c9:0c:f4:29:48:f8:6e:29:
ab:f9:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org